Digitising Social Care Newsletter - August 2024
For any Dom care provider who requires help with NHSmail please contact karen.holley@careandsupportwest.com and for any Care Home provider who requires help with NHSmail please contact digital.carehomes@onecare.org.uk.
NHSmail account update
New account creations for National Administration Service (NAS) managed organisations will start to have Multi-Factor Authentication (MFA) applied by default from 29 September, with existing user accounts to follow at a time to be confirmed.
Due to a desire to ramp up cybersecurity and streamline processes the rollout of MFA to all existing NAS user accounts will now mirror the timelines for remaining non-NAS accounts.
The timeline and process is as follows:
For all existing NHSmail accounts, on the 19 August users will receive a pop-up notification asking them to register an MFA authentication method when you logging to their account. This prompt can be snoozed for a period of 14 days.
By 2 September, if you MFA has not been enrolled in, access to NHSmail will change.
How will access change?
NHSmail accounts will be moved to a specific group policy that will require a stronger password policy approach and additional restrictions with stringent security measures applied, these being:
· Enhanced password policy including having to reset your password on 2 September and requiring a minimum of 20 characters.
· Not having persistent browsing sessions.
· Restrictions on sign in frequency.
· Password expiring every 90 days.